# Managing User Account Settings in Microsoft 365

---

## 🔑 Identity Models & Where to Manage Accounts

* **Cloud-only model**
    
    * Manage accounts in:
        
        * **Microsoft 365 admin center**
            
        * **Microsoft Entra admin center**
            
        * **PowerShell**
            
* **Hybrid model**
    
    * Accounts sync from **on-prem AD DS** using:
        
        * **Microsoft Entra Connect Sync**
            
        * **Microsoft Entra Cloud Sync**
            
    * Must manage accounts with **on-prem AD DS tools** (not in Microsoft 365 directly).
        

---

## 🛠 Tools for Managing User Accounts

| **Tool** | **Use Cases & Notes** |
| --- | --- |
| **Microsoft 365 admin center** | \- Add/edit users individually or in bulk  
\- GUI-based, easy to use  
\- Can’t modify synced (hybrid) accounts, except **location & licenses**  
\- Not usable with SSO-enabled orgs |
| **Windows PowerShell** | \- Script-based, automation-friendly  
\- Supports bulk changes  
\- Can assign location & licenses regardless of provisioning method |
| **Bulk Import (CSV)** | \- Adds many users at once  
\- Simple but **not compatible with SSO** |
| **Microsoft Entra ID** | \- Free version included with M365  
\- Provides **self-service password reset**, branding, access panel customization  
\- Premium P1/P2 = more advanced features |
| **Directory Synchronization** | \- Required for hybrid setups  
\- Syncs **users, groups, attributes** from AD DS  
\- Needed for **SSO** and hybrid Exchange  
\- Must be installed on-prem & maintained |

---

## ⚠️ Licensing & Location

* Accounts created **without a license**:
    
    * Can sign in and view Microsoft 365 Admin Center.
        
    * ❌ Can’t access subscription services until a license is assigned.
        
* Location is required → determines available services.
    
* After location + license assigned → system replicates account to appropriate service(s).
    

---

## 👤 Managing Accounts in the Admin Center

### Steps:

1. Go to **Users > Active Users**.
    
2. Select a user → open **account pane**.
    
3. Tabs available:
    

### 🔹 **Account Tab**

* Edit username, aliases, email addresses.
    
* Manage group membership, roles, contact info.
    
* Enable/disable MFA, force sign-out.
    
* View **sign-in history (last 30 days)** + **Microsoft 365 activations**.
    

### 🔹 **Devices Tab**

* Shows Intune-enrolled devices.
    

### 🔹 **Licenses & Apps Tab**

* Assign/remove licenses.
    
* Set **user location**.
    
* Customize which apps are available.
    

### 🔹 **Mail Tab**

* Manage mailbox permissions, forwarding, auto-replies.
    
* Adjust visibility in Global Address List (GAL).
    
* Configure litigation hold, Exchange properties, and email apps.
    

### 🔹 **OneDrive Tab**

* Access user’s files.
    
* Manage storage quota, external sharing.
    
* Links to SharePoint admin center for org-wide retention & storage settings.
    

---

✅ **Key Exam/Job Role Takeaways**:

* Admin Center = easiest for day-to-day management.
    
* PowerShell = for automation + bulk management.
    
* Hybrid = managed **on-prem only**, synced to Microsoft 365.
    
* Licenses + location = must be set for users to access services.
    
* Admin Center tabs = **Account, Devices, Licenses & Apps, Mail, OneDrive** → know what each one controls.